Privacy Policy & Data Protection Notice

Last updated: October 2026 · Valid for the entire duration of Erasmus+ Project No. 2026-1-ES01-KA210-ADU-000452468.

1. Identity & Contact Details of the Data Controller

In compliance with Article 13 of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD), the Data Controller responsible for the processing of personal data on this platform is:

The project is carried out in transnational partnership with:

• Stichting Multiculturele Bruggen (SMB) (Netherlands, KVK: 91963680 / OID: E10356690, Beverwijk, Netherlands) — Dissemination & Inclusion Lead;
• Larsan Consulting (Latvia / OID: E10086202, Riga, Latvia) — Pedagogical & Quality Assurance Lead.

2. Hosting Infrastructure & Data Location (Germany, EU)

All web services, application databases, and data processing activities for aieducator.eu are physically hosted on server infrastructure located in the Federal Republic of Germany (Frankfurt am Main / Nuremberg datacenter regions, European Union).

• Strict EU Territoriality: 100% of data storage and transmission takes place exclusively within the EU/EEA, under the stringent territorial requirements of GDPR Chapter V. No personal data is transferred to third countries or international organizations without adequate EU Commission adequacy decisions.
• Hosting Standards: Datacenters comply with ISO/IEC 27001 certification, high-availability European power grids, and rigorous GDPR Article 28 data processing agreements (DPA).

3. Categories of Data Collected & Purposes of Processing

A. Technical Browsing Data (Server Logs)

When you access our platform, our web server temporarily logs standard transmission protocols: IP address (truncated/anonymized), date and time of request, requested URL, HTTP status code, and browser user-agent.

Purpose & Legal Basis: Article 6(1)(f) GDPR (Legitimate Interest) — strictly to ensure cybersecurity, prevent denial-of-service (DDoS) attacks, debug server faults, and maintain platform uptime.

B. Educator Needs Assessment Survey (Survey Tool)

Our interactive survey (/survey.html) collects pedagogical feedback, educator challenges, and AI training preferences to guide the development of our open-source tools.

• Anonymous by Default: Participation is completely voluntary, and submissions do not require your real name or personal identity.
• Optional Email for Pilot Programs: If you choose to voluntarily provide an email address to receive project results, test the AI Co-pilot prototype, or receive course updates, your email will be stored solely for direct project communications and pilot testing.
• Legal Basis: Article 6(1)(a) GDPR (Explicit Consent) and Article 6(1)(e) GDPR (Public Interest in educational research co-funded by the EU).

C. Contact Requests & Correspondence

If you contact us via email (e.g., info@aieducator.eu), we process your email address and message contents solely to respond to your inquiry.

4. Non-Commercial & Open Educational Mandate

This platform is funded under the European Union's Erasmus+ Programme (KA210-ADU – Small-scale Partnerships in Adult Education). In line with EU principles:

• No Commercial Exploitation: We will never sell, lease, rent, or trade your personal data to advertisers, brokers, or third-party marketing companies.
• Open Educational Resources (OER): Research findings, pedagogical guides, and course modules resulting from survey analytics are released publicly under the Creative Commons Attribution-ShareAlike 4.0 International License (CC BY-SA 4.0) and submitted to the European Commission's EPALE platform. All published research reports contain strictly aggregated, fully anonymized statistical data.

5. Data Retention Periods

• Server Security Logs: Automatically erased or anonymized after a maximum of 14 to 30 days.
• Contact Inquiries: Retained only for the duration required to resolve your communication, up to a maximum of 6 months.
• Survey Pilot Contacts: Retained for the duration of the AI-ADU project lifecycle (1 October 2026 – 31 March 2028), unless you withdraw your consent earlier.
• Erasmus+ Project Audit Archive: In accordance with Article II.27 of the standard European Commission Grant Agreement, statutory administrative and financial audit documentation must be preserved for five (5) years starting from the date of payment of the final balance by the Spanish National Agency (SEPIE). Personal details in audit files are limited strictly to official partner staff attendance logs and statutory signatures.

6. Cookies & Tracking Technologies

We respect your digital privacy. This website:

• Does NOT use third-party advertising cookies, retargeting pixels, or social media trackers (no Facebook Pixel, no Google Ads, no tracking beacons).
• Uses strictly essential local storage / cookies: Only local session keys to remember your preferred interface language (EN, ES, NL, LV) across page navigation. These do not track you across other websites.

7. Your Data Protection Rights under GDPR

Under Chapter III of the GDPR (Articles 15 to 22), you hold the following statutory rights regarding your personal data:

• Right of Access (Art. 15): Request confirmation and a free copy of any personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data where retention is no longer necessary or consent has been withdrawn.
• Right to Restriction of Processing (Art. 18): Restrict processing under specified legal conditions.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): Object at any time to data processing carried out under legitimate interest grounds.
• Right to Withdraw Consent (Art. 7(3)): You may revoke consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

8. Right to Lodge a Complaint with a Supervisory Authority

If you believe our processing of your personal data infringes European data protection legislation, you have the right under Article 77 GDPR to lodge an official complaint with a competent supervisory authority:

• Spain (Lead Supervisory Authority): Agencia Española de Protección de Datos (AEPD) — www.aepd.es | C/ Jorge Juan, 6, 28001 Madrid.
• Netherlands: Autoriteit Persoonsgegevens (AP) — autoriteitpersoonsgegevens.nl.
• Latvia: Datu valsts inspekcija (DVI) — dvi.gov.lv.

9. Amendments to this Privacy Policy

We may periodically update this policy to reflect platform improvements or statutory directives issued by the European Commission, SEPIE, or data protection authorities. The revised version will always be published on this page with the updated revision date.